I used to install qmail fairly often on different Unix-like systems. I remember the installation instructions clearly setting out the limits that should be set on its processes, and I remember following them.

It sounds like the Debian packager didn’t follow the instructions. That doesn’t seem like the fault of the software.